Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File:                     d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier:          K8q9kF0Z22nnTse+Nla4yYA5hoknU+OFmxS9KUApb+A=
Subject key identifier:   82:F6:D4:A9:98:DD:9B:16:45:0D:55:3D:CA:D1:88:20:75:C3:F9:56
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer:       /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial:       0197B6A165A1490D7A5E799CF87D41A1EE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 13:01:59 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:59 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:59 +0000
Files and hashes:         1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
                          2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: 2KOglSdCRymzlb39vlxHtYX4pvwS2eyD1kyL2ETqqnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:65:a1:49:0d:7a:5e:79:9c:f8:7d:41:a1:ee:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
        Validity
            Not Before: Jun 28 13:01:59 2025 GMT
            Not After : Jun 29 13:01:59 2025 GMT
        Subject: CN=82f6d4a998dd9b16450d553dcad1882075c3f956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:ff:dd:5f:73:b3:f6:9e:43:fa:a8:8e:cc:
                    e2:98:50:f2:db:08:e9:95:d9:b2:88:95:3a:f5:de:
                    50:97:94:10:7f:98:43:50:56:50:0c:e8:04:0c:0a:
                    81:6e:78:b5:5a:ea:9d:c8:7f:93:04:71:74:c6:ca:
                    2c:98:7c:f8:f0:02:c9:e5:92:a9:f8:1a:6e:41:76:
                    7c:f7:34:ae:38:0f:c2:ce:e6:50:72:98:97:cb:53:
                    54:4e:49:78:49:52:90:a0:e0:dc:16:22:13:94:db:
                    56:80:21:a6:e2:98:7c:c8:1c:47:f1:67:9c:bf:53:
                    c9:91:c0:06:49:db:06:30:97:30:5f:4a:ca:4d:71:
                    02:e8:cd:f2:4e:97:75:44:61:31:69:95:60:21:4d:
                    7d:83:30:02:b3:e6:a3:71:d5:9d:10:cc:05:b4:5e:
                    93:c8:aa:24:c5:02:22:40:04:a5:ee:88:0d:91:1a:
                    2b:27:69:26:09:6a:c7:62:00:fb:f9:ab:af:5e:05:
                    9b:ad:bd:17:cf:f7:20:1c:41:7a:2f:32:3a:9e:d8:
                    ff:38:2f:9c:9e:a8:31:88:1b:e3:98:18:e4:0b:72:
                    51:ab:fe:ca:d0:4a:ca:31:75:88:b6:01:c9:7a:64:
                    62:35:82:87:d5:b9:ec:74:c6:d5:3f:70:0a:fe:8d:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:D4:A9:98:DD:9B:16:45:0D:55:3D:CA:D1:88:20:75:C3:F9:56
            X509v3 Authority Key Identifier:
                keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:a7:d7:1d:1a:ad:b0:91:50:eb:4c:2d:8d:a6:07:5b:89:
         8e:cd:24:9d:24:c2:fa:f1:ee:cb:7a:7e:dc:3c:5c:3e:e5:00:
         91:00:2a:b5:7c:dc:d4:cc:98:c4:59:df:fd:30:a9:27:af:79:
         31:d4:76:14:5c:c8:70:eb:09:b9:38:79:3a:87:34:b2:77:b5:
         9d:82:2a:dc:1d:26:99:56:fc:56:47:ea:fd:b5:b6:e7:58:da:
         ce:a8:49:da:1b:86:4e:92:cb:90:1a:7b:bc:ed:39:b4:4d:63:
         7b:47:f8:5e:f0:1f:c8:5d:b5:49:9f:4f:9d:85:49:6c:ba:8b:
         d9:23:ce:20:0f:80:69:65:0e:37:d4:d2:da:85:08:cf:4e:fe:
         5d:3d:65:3b:05:61:1d:66:e8:88:30:e8:d0:da:e5:f6:e3:96:
         76:65:44:53:a7:fc:ec:54:be:c2:48:3c:b0:b7:e4:55:cb:67:
         e1:ca:19:29:45:db:db:88:fc:b4:e5:73:9c:eb:ae:2c:61:e0:
         db:c8:15:22:60:87:9d:c4:f5:e9:b7:15:0d:c7:93:7d:2c:e4:
         ed:72:cf:9c:b0:65:94:ee:ad:74:90:7e:b3:83:61:6f:ee:74:
         9e:c9:57:ea:31:d1:83:63:45:8f:e9:1a:92:0b:4a:3a:52:b7:
         bc:c5:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:17 2025 by rpki-client